ansible-role-os-bootstrap/files/qemu_ag_provisioning-sepol.te

18 lines
364 B
Plaintext

module qemu_ag_provisioning-sepol 1.0;
require {
type etc_t;
type systemd_timedated_t;
type virt_qemu_ga_t;
type proc_net_t;
class lnk_file unlink;
class file read;
}
#============= systemd_timedated_t ==============
allow systemd_timedated_t etc_t:lnk_file unlink;
#============= virt_qemu_ga_t ==============
allow virt_qemu_ga_t proc_net_t:file read;